According to the email, shared on social media by some recipients, affected customers placed orders on the company's mobile app or website for about 28 hours between the morning of October 01 and midday on October 02.